Digital Signing (Beat The Dead Horse) was Re: Free Software for m$

[David Mandala]

You are incorrect, even if someone gained access to Derek's machine they
would not be able to sign mail or anything else for that matter, your
key is encrypted and requires it's passphrase to sign something. So you
could started getting unsigned mails from Derek but they may or may not
be his, but signed mail came from him not his machine.

Thoreau wrote:
> 
> I see an attachment, if I don't know what it is, the message is deleted.
> The message better have a damn hefty description for me to even consider
> opening it. I do not need a signature to tell me wether or not to open a
> file. Common sense, and even an up-to-date virus scanner can do wonders for
> keeping you safe.
> 
> Suppose someone gains unauthorized access to Derek's machine?  That person
> could send out anything they want, signed, and I would be putting my faith
> in that signature?  Not likely.
> 
> Thoreau
> 
> -----Original Message-----
> From: plug-discuss-admin@lists.plug.phoenix.az.us
> [mailto:plug-discuss-admin@lists.plug.phoenix.az.us]On Behalf Of foodog
> Sent: Wednesday, September 25, 2002 8:28 AM
> To: plug-discuss@lists.plug.phoenix.az.us
> Subject: Re: Digital Signing (Beat The Dead Horse) was Re: Free Software
> for m$
> 
> Tom Achtenberg wrote:
> >
> > You are correct, I left off the "Express".  I just do not see any value in
> > the signing.
> 
> Tom,
> 
> "Hi, here's a random infected file from someone who once received email
> from Derek, now has a variant of the Klez worm, and is unknowingly
> sending forged email in his name".
> 
> < Derek's a good guy.  He wouldn't send you anything bad.  Open the
> attachment! C'mon!! It's a kewl screensaver of Janet Reno! >
> 
> Fortunately, Klez can't forge his digital signature. You realize the
> message is bogus, and you delete it. Value :-)
> 
> Steve
> "If you can't beat them, arrange to have them beaten."
> - George Carlin
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change  you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> 
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change  you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss